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[57] ABSTRACT 

A system determines that a frame relay connection exists 
between an interface on a first interface device and an 
interface on a second interface device, for example by 
comparing addresses resident in routing tables of the inter- 
face devices. The system then queries each of the first and 
second interface devices, to determine the amount of traffic 
that is communicated by each channel of each of the two 
interfaces. This data is then correlated to determine the 
relative amount of data by each channel on each of the two 
interfaces, and the pair of channels having the best correla- 
tion are determined to represent an actual connection. 
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METHOD AND APPARATUS FOR 
DETERMINING FRAME RELAY 
CONNECTIONS 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The invention relates to frame relay communications, and 
more particularly to a method and apparatus for identifying 
on which channel a frame relay communication is made. 

2. Discussion of the Related Art 

Computer networks are widely used to provide increased 
computing power, sharing of resources and communication 
between users. One type of network is referred to as a frame 
relay network — it complies with an interface standard that 
provides statistical time division multiplexing and circuit 
switching, and is typically optimized for the transport of 
protocol-oriented data. 

In a typical frame relay n et work, a com munications 
carrierl^rovid& iLa.^^ 

particular entry points (sites ^ t o the network. The data is 
passeaThrough a "connect ion," which" is~~also referred to as 
*^Wtu1a TCircWC'% permanent virtual circuit (PVC) has one 
gu aranteed data throughput, while a switched virtual circuit 
'(S VC) allows additional throughput in response to a specific 
demand. Each connection (i.e., virtua l circuit) is identified 
by a da ta link connection jcfentihero r ina ex~(l>IXI)liuTnT5eT: , 
Many ULCI numbers have local significance only, i.e.7~a 
connection identified by a first DLCI number at a first site, 
may be identified by a different DLCI number at a second 
site. The connection may be implemented via a set datapath, 
or the data may be re-routed through a different data path 
depending upon circuit performance. Additional detail on 
frame relay architectures, protocols, and analysis is 
described in Analyzing Broadband Networks, Mark A. 
Miller, M&T Books, pp. 31-169 (1994), which is hereby 
incorporated by reference. 

In the operation and maintenance of computer networks, 
a number of issues arise including traffic overload on various 
parts of the network, optimum placement and interconnec- 
tion of network resources, security, isolation of network 
faults, and the like. These issues become increasingly com- 
plex and difficult to understand and manage as the network 
becomes larger and more complex. For example, if a net- 
work device is not sending messages, it may be difficult to 
determine whether the fault is with the device itself, a data 
communication link, or an intermediate network device 
between the sending and receiving devices. 

Network management systems have been developed to 
resolve such issues. Older systems typically operated by 
collecting large volumes of information, which then 
required evaluation by a network administrator; this placed 
a tremendous burden on, and required a highly-skilled 
network administrator. Newer network management plat- 
forms systematize the knowledge of the networking expert 
such that common problems can be detected, isolated and 
repaired, either automatically or with the involvement of 
less-skilled personnel. Such a system typically includes a 
graphical representation of that portion of the network being 
monitored by the system. An example of the newer auto- 
mated system is the Spectrum™ network management plat- 
form available from Cabletron Systems, Inc., Rochester, 
N.H. USA. 

It would be desirable to provide a network management 
system that can determine and display a graphical represen- 
tation of particular connections which exist in a frame relay 
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network. However, a single interface device, such as a 
router, switch, or bridge, may have several interfaces, each 
of which communicates with the frame relay network. 
Additionally, each interface may communicate over several 

5 distinct frame relay connections. Still further, each interface 
device may not have specific knowledge regarding the other 
interface device(s) with which it is communicating, much 
less the specific virtual circuits (connections) that exist at 
any given time. Accordingly, it would be desirable to be able 

10 to determine particular connections from data which is , 
available from the interface devices. 

SUMMARY OF THE INVENTION 

According to one embodiment of the present invention, a 
network management system is provided which determines 
that a frame relay connection is coupled between a first 
interface on a first interface device and a second interface on 
a second interface device, for example by comparing 
addresses which reside in routing tables of the first and 

20 second interface devices. The system queries the manage- 
ment information base (MIB) of each of the first and second 
interface devices, to determine the amount of traffic that is 
communicated by each channel of the two interfaces. This 
data is then correlated to determine a relative amount of data 

25 transmitted on each channel of the two interfaces, and the 
two channels having the best correlation are determined to 
represent a particular connection. 
According to a method embodiment of the invention, a 

3Q method is provided for identifying a connection in a frame 
relay network. The method comprises the steps of identify- 
ing a first plurality of channels of a first interface and a 
second plurality of channels of a second interface that 
potentially relate to a frame relay connection, and then 

35 selecting, as an identifier for the frame relay connection, a 
first channel from the first plurality of channels and a second 
channel from the second plurality of channels based upon a 
relative amount of data transferred on each of the first and 
second channels. 

4Q Yet another apparatus embodiment includes a data mod- 
ule and a results analyzer. The data module is coupled to a 
frame relay network and has an output that provides an 
indication of a first plurality of channels and a second 
plurality of channels that potentially relate to a frame relay 

45 connection, and the results analyzer selects a first channel 
from the first plurality of channels and a second channel 
from the second plurality of channels based upon a relative 
amount of data transferred on each of the first and second 
channels, in order to identify the frame relay connection, 

50 In any of these embodiments, a plurality of correlation 
factors may be determined, for example by a statistics 
module, for each potential pair of channels. The correlation 
factor having a best (e.g., highest) value may be used to 
determine which of the plurality of potential pairs of chan- 

55 nels has the best (e.g., highest) correlation factor. A corre- 
lation factor may be related to a similarity between an 
amount of data transmitted by a first channel and an amount 
of data received by a second channel during a period of time. 
In any of these embodiments, a first interface device may 

60 be queried to determine an amount of data that has been 
transferred by one channel as of a first time, and the first 
interface device queried again to determine an amount of 
data that has been transferred by the one channel as of a 
second time, wherein the amount of data being transferred is 

65 determined to be the difference between these two amounts. 
A similar set of queries and difference determination may be 
made for a second interface of the potential pair. 
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In accordance with at least one embodiment, a determi- relay network 11 by communicating with devices within 

nation may be made that a connection exists between an each of the sites 13A-C. Each device within the sites 13A-C 

interface of a first interface device and an interface of a is referred to herein as an "interface device." 

second interface device by comparing an address of the first FIG. 1 shows one embodiment of the network manage- 

interface with a destination address of data transmitted by 5 ment system 10, including a network interface and control 

the second interface. subsystem 16, a virtual network machine 17, and a user 

These and other features and benefits of the present 18 ™* virtual network machine 17 is copied to 

invention will be more particularly described in the follow- both network interface and control subsystem 16 and the 

• user interface 18. The network interface and control sub- 

ing detailed description. ^ system u fa cQuplcd lQ ^ of ^ framc fclay sites 13A _ C 

BRIEF DESCRIPTION OF THE DRAWINGS bv a corresponding one of communication paths 14A-C, and 

is coupled to the other network(s) 12 by communication path 

FIG. 1 is a schematic diagram of a network management 15. The communication paths 14A-C and 15 may be actual 

system that interfaces with elements of a frame relay net- connections, or may represent a virtual access to data that 

wor k; relates to a particular site. For example, the network inter- 

1** far*** anH r-rtntrrtl ciiK<-*;rc(<*m 1 d, mn\t arrccc a cinrrl*» Hota 

FIG. 2 is a block diagram of two devices which each ^^^^^^ £ 0 7ta rii^l3/J^to.d 

interface with a frame relay network, such as the one shown 0 / directi ; acceS sing the interface devices on each site. 

in ' ' In one embodiment, the network management system 10 

FIG. 3 shows data which may be obtained from the two comprises a programmed digital computer, wherein a pro- 

devices of FIG. 2, in accordance with at least one network 20 g ram ^ implemented using an object-oriented programming 

protocol standard; language such as C++, Eiffel, SmallTalk, and Ada. The 

FIG. 4 is a block diagram of a network management virtual network machine 17 includes interrelated intelligent 

system according to one embodiment of the invention, and models (objects) of network entities and relations between 

a frame relay device which communicates therewith; network entities, including a capability for acquiring net- 

™„ . . n j ■ . r 25 work data pertaining to a condition of a network entity from 

FIG. 5 is a process flow diagram showing steps of a ^ ^ding ^ m>± entit and for those entit f es no , 

process in accordance with an embodiment of the invention; capaMe Qf bemg contacted> infe „ ing their slatus from lhe 

FIG. 6 is a flow diagram with greater detail of a portion status of other communicating entities. The virtual network 

of the process shown in FIG. 5; machine 17 maintains objects which include network data 

FIG. 7 is a flow diagram with greater detail of another 30 relating to the corresponding network entity and one or more 

portion of the process shown in FIG. 5; inference handlers for processing the network data, the 

FIG. 8 is an example of a traffic table, for data such as that inference handlers being responsive to changes occurring in 

shown in FIG. 3, wherein the data relates to a first interface; the same and /° r a different object. The network data can then 

r^j* ft . , n . re c j * ti_ # it be transferred to the user interface 18 for supplying the 

FIG. 9 is an example of a traffic table, for data that relates . . ^ / b 

j . „ c , network data to a user, 

to a second interface; and m . 

- , . ■ r 1 1 The user interface 18 may be resident on a computer that 

FIG. 10 is an example of a correlation matrix for the data fa from ^ compmer on which subsystem 16 and 

that is shown in MO. 3. virtual network machine 17 reside . i n such an arrangement, 

DETAILED DESCRIPTION tne user interface 18 may be referred to as a client, while the 

40 network interface and control subsystem 16 and the virtual 

Aspects of the present invention will be described in network machine 17 may be referred to as a server. Several 

conjunction with the use of a model-based network man- instances of the user interface 18 may exist for a single 

agement system, such as Spectrum™, which is described in instance of the virtual network machine 17, so that several 

U.S. Pat. No. 5,261,044, issued Nov. 9, 1993 to R. Dev et aL, users raay concurrently view different aspects of the net- 

and hereby incorporated by reference in its entirety. The 45 works being monitored by the network management system 

Spectrum™ network management system is commercially 10. 

available and described in various user manuals and litera- ln one embodiment of the invention, the network interface 

ture available from Cabletron Systems, Inc., 35 Industrial and control subsystem 16 obtains data relating to the frame 

Way, Rochester, N.H. 03867. relay netW ork 11 in accordance with the Simple Network 

Other commercially available network management sys- 50 Management Protocol (SNMP), SNMP is a standard that 

terns and related applications include: HP OpenView, defines common messages and databases to support network 

Hewlett Packard Corp., 3000 Hanover Street, Palo Alto, management. A group known as the Internet Engineering 

Calif. 94304; LattisNet, Bay Networks, 4401 Great Ameri- Task Force (IETF) has established several standards in 

can Pkwy., Santa Clara, Calif. 95054; IBM Netview/6000, accordance with the SNMP framework, and in particular a 

IBM Corp., Old Orchard Road, Armonk, N.Y. 10504; and 55 standard known as a Management Information Base (MIB). 

SunNet Manager, SunConnect, 2550 Garcia Ave, Mountain The MIB specifies the data items that certain devices must 

View, Calif. 94043. Embodiments of the invention described maintain, other data items that are proprietary or optional, 

herein may be applicable to such other network management and the operations allowed on such devices. For example, 

systems or portion thereof. the MIB specifies that Internet Protocol (IP) software must 

FIG. 1 shows a network management system 10 that 60 keep a count of all octets (8-bit bytes) that arrive over each 
monitors a frame relay network 11 and other network(s) 12. network interface. Thus, a network management system is 
The other network(s) 12 may be other frame relay networks, able to transmit a specific query (defined by the MIB) to a 
or other types of networks, e.g., ethernet, token ring, FDDI, network interface device, and receive in response a message 
etc. The frame relay network 11 is illustrated as connecting providing such count data stored within the network inter- 
three different sites 13 that communicate across the frame 65 face device's MIB. A document known as the IETF RFC 
relay network— site A(13A), site B (13B), and site C (13C). (Request for Comments) 1315 defines a portion of the MIB 
The network management system 10 monitors the frame for use with managing frame relay protocols. 
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RFCs such as RFC- 13 15 are available in both printed and 
electronic form. Printed copies may be obtained from Net- 
work Solutions, Inc., 505 Huntmar Park Drive, Herndon Va. 
22070, while electronic copies may be accessed on the 
internet. In particular, an internet user may use an "anony- 
mous" FTP to the host ds.internic.net (residing at 
129.20.239.132) and retrieve the desired files from the 
directory "rfc/". 

FIG. 2 illustrates detail of two interface devices, site A 
router 21, and site B router 22, each of which is coupled to 
the frame relay network 11. Each of routers 21 and 22 may 
have several interfaces. In particular, site A router 21 has 
interfaces lf7, lfiS, and lf9, while site B router 22 has 
interfaces 10., I£2, If, and If4. Each of these interfaces are 
coupled to the frame relay network 11. 

In order for a network m an socmen I system to effectively 
moni t or and accurately represent the £ram e„rela y-Detwo;rk"lf t 
jtjsjea rable to dg^mi^nelw^ 

^ion^tniri the ''framTTelay network, it two devices are 
performing routing or bridging, then the network manage- 
ment system 10 can infer a connection between two of the 
interfaces by reading the route tables or transparent bridge 
tables (defined within the MIB) of the interface devices 21 
and 22. In the example shown in FIGS, 2 and 3, the interface 
devices 21 and 22 are routers that perform routing functions, 
and therefore the IP routing tables may be read by the 
network management system 10. Information relating to the 
IP routing tables is defined within the MIB, and is available 
from RFC documents such as MIB-II RFC-1213. 

In particular, FIG. 3 shows router information data 30 and 
routing table entries 31 for the site A router 21. The router 
information data 30 indicates that device 21 is a frame relay 
interface, and that information was requested pertaining to 
interface lf9, which has an IP address of 131.124.196.1. The 
router table information 31 shows that there are three groups 
of destination addresses (e.g., subnets) for messages to be 
sent from interface If 9, two of which had a next hop IP 
address of 131.124.196.3, and one of which had a next hop 
IP address of 131.124.196.2. 

Similarly, router information data 32 relates to the site B 
router 22, and router table entries 33 contain information 
pertaining to interfaces I£2 and If4 of the site B router 22. 
The router table information 33 shows that there are three 
groups of destination addresses (e.g., subnets) for messages 
to be sent from interface If4 with a next hop IP address of 
131.124.196.1. 

Because messages are to be sent from interface If9 to 
interface If4 (as indicated by the next hop IP address 
131.124.196.2 in table 31 matching the IP address of inter- 
face If4), a network management system can infer that a 
frame relay connection exists between interface If 9 and 
interface If4. This conclusion is further supported by the 
evidence that messages are to be sent from interface If4 to 
interface If9, as indicated by several of the next hop IP 
addresses in router table entries 33 (from interface If4) 
matching the IP address of interface If9 (131.124.196.1). 

Thus, by determining the IP address of a message to be 
sent from an interface across a frame relay network, and then 
matching this IP address to the IP address of another 
interface on the frame relay network, a network management 
system can determine which two interfaces on a frame relay 
network share a connection. Similar results may be achieved 
by querying the transparent bridge tables if the two interface 
devices are performing bridge functions. The bridge MIB is 
defined in RFC-1493. 

However, each interface may have several "channels", 
each communicating across a different connection within the 
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frame relay network 11. For example, FIG. 2 shows that 
interface If9 has three channels 211, 212, and 213, interface 
If 8 has two channels 214 and 215, interface If4 has two 
channels 221 and 222, interface 113 has one channel 223, and 
interface If2 has three channels 224, 225, and 226. Thus, 
even though it may be known which two interfaces share a 
connection within the frame relay network 11, it still may be 
uncertain which two channels of the two interfaces actually 
share the connection. 

FIG. 4 is a block diagram showing operation of a system 
to determine the channels that share a frame relay connec- 
tion. In particular, FIG. 4 depicts a network interface and 
control subsystem 40 which represents an embodiment of 
the network management and control subsystem 16 of FIG. 
1. The subsystem 40 communicates with a frame relay 
interface device 41, which as described above, may be a 
router, switch, network interface card, or any device that 
communicates across a frame relay network (not shown in 
FIG. 4). The network interface and control subsystem 40 
includes a data gatherer 42, a statistics module 43, and a 
results analyzer 44. Traffic tables 45 A, 45B, . . . 45N are 
coupled between the data gatherer 42 and the statistics 
module 43, and correlation matrices 46A, 46 B, . . . , 46N are 
coupled between the statistics module 43 and the results 
analyzer 44. 

The results analyzer 44 is the portion of the network 
interface and control module that provides input to the 
virtual network machine, and the data gatherer 42 interfaces 
with the interface device 41. As described above, associated 
with the interface device 41 is a MIB 47. A portion of the 
MIB 47 is the frame relay circuit table (frCircuitTable) 48, 
as defined in RFC- 131 5. The data gatherer 42 communicates 
with the interface device 41 in the form of queries 49 which 
request information from the MIB 47, and in response the 
MIB 47 provides a count of octets sent by a particular 
channel of an interface of the interface device (frCircuitSent 
Octets), and a count of octets received by a particular 
channel of an interface of the interface device 
(frCircuitReceivedOctets), generally shown as 50 in FIG. 4. 

FIG. 5 is a high level process flow diagram of operations 
performed by an embodiment of the network interface and 
control subsystem 40. In step 51, the data gatherer 42 
determines that a frame relay connection exists between a 
first interface and a second interface (e.g., interface If9 of 
site A router 21 and interface If4 of site B router 22). As 
discussed above, this determination may be made by ana- 
lyzing the next hop address within a routing table, or by 
other methods known to those skilled in the art. 

In step 52, the data gatherer 42 determines an amount of 
data that is communicated in each direction by each channel 
of the first and second interfaces. This step may include 
determining which channels are actually active (which may 
also be determined by querying the MIB 47), in which case 
any channels that are not active may be eliminated from 
consideration. Additionally, it is not necessary to determine 
the amount of data in both directions, although such analysis 
may result in a more complete solution as described in more 
detail below. 

In one embodiment, the data gatherer 42 stores the data 
amounts in the appropriate traffic table 45. One of the traffic 
tables 45A may be for the analysis of a first interface, while 
another of the traffic tables 45B may be for the analysis of 
a second interface. 

Once the amount of data has been determined, the statis- 
tics module 43 determines the level of correlation between 
data on each potential channel pair. A potential channel pair 
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is made up of one channel from each interface for which a FIG. 8 shows more detail of an implementation of steps 
connection is known to exist. In particular, step 53 indicates 53 and 54 of FIG. 5 . In this implementation, for each_ 
that the level of correlation is determined between the potential channel pair, "a correlation f actor is calculated 
amount of data received by each channel of each interface which represents the sim ilarity of t he amount of data 
and the amount of data transmitted by each channel of the 5 ~transferred/receive"d by one channel compared with the 
other interface. In the embodiment shown in FIG. 4, the amount of dataJcansferred / received bv the other channel 
correlation data is stored in one of the correlation matrices fetep 71). In one embodiment, the correlation factor is 
46A-N (e.g., one for each interface pair). As shown in — ^lculated from the data transferred in both directions, as 
correlation matrix 46 A, the matrix includes several rows for indicated in Equation (1)* 
interface B, and several columns for interface A, Each row 
represents one channel on interface B, and each column 
represents one channel on interface A Thus, each row- 
column intersection can store a correlation factor that relates CFl z = 100 _ ^{DeitaOut l - Deitain 2 )) * wo 
the amount of data traffic on the interface B channel repre- " Deltaic +• DeitaOu h + Deltaic + DetraOut 2 
sented by the corresponding row, with the amount of data 
traffic on the interface A channel represented by the corre- ^ 
sponding column. The statistics module 43 fills in the * . 

correlation matrix 46A with correlation factors derived from abs 15 an absolute value fiction; 

the traffic data stored in the traffic tables 45. DeltaOut,- represents a value from column 87 of FIG. 8 or 

Once the correlation matrix 46A is populated, the results column 97 of FIG. 9; and 

analyzer 44 evaluates the correlation factors to determine the 20 Deltaln, represents a value from column 88 of FIG. 8 or 

channel of interface A and the channel of interface B that are column 98 of FIG. 9. 

communicating via the frame relay connection determined If the two channels for which the CF is calculated are 

in step 51, more specifically by inferring that a specific connected, the absolute value of the difference between 

connection exists between highly correlated channels (step Deltal^ and Delta0ut 2 and the absolute value of the dif- 

54). Once the specific connection is inferred, the results 2 5 ference between DeltaOut,- and Deltaln 2 would each ideally 

analyzer 44 may update the virtual network machine 17 to fc e zer0j jf the frame counters were accessed at precisely the 

represent the connection (step 55). same t i mes Thus, for ideal data transmission, the correlation 

FIG. 6 shows more detail of an implementation of step 52 f ac t or CF would be equal to 100. However, it is likely that 

of FIG. 5. In this implementation, the circuit tables of MIB some differences will remain in these access times. The 

47 for each of the first and second interfaces are queried to 30 denominator of equation (1) accounts for the total amount of 

determine the value of a "frame in counter" and a value of data transferred by the two channels; in this case, channel 

a "frame out counter" for each active channel (step 61). As «i» an d channel "2" for which the correlation factor "CF^" 

shown in FIG. 4, one example of a "frame in counter" is the jg calculated. As indicated above, the correlation matrix 46 

MIB variable frCircuitSentOctets, and an example of a may then be populated with the correlation factor CF that is 

"frame out counter" is the MIB variable frCircuitReceive- 35 calculated for each potential channel pair (step 72). 

dOctets. These variables each count the total number of Once the correlation matrix has been populated, then the 

octets (8-bit bytes) transmitted or received by a specific correlation factors may be compared with one another to 

channel for which the MIB is queried, including network determine the potential channel pair that has the highest 

overhead associated with transferring the data. However, i eve i 0 f correlation (step 73). Once this comparison is 

other data may be used to determine the amount of traffic or 40 performed, the potential channel pair having the highest 

other relevant statistics, for example a variable that tracks i eve l of correlation is selected as the specific frame relay 

the total number of frames transmitted or received, or a connection that exists between the first interface and the 

variable that tracks the total number of errors in transmitted second interface (step 74). 

or received data. FIG. 8 shows a specific example of a traffic table 80 , 

In step 62, the values of the "frame in counter" and the 45 which contains eight columns, each populated with data, 

"frame out counter" are each stored, and a predetermined Column 81 ("Ifindex") identi fies the interface for which 

amount of time is allowed to pass. Once the predetermined juenesJUve bwu petforffig a^^ 

amount of time has passed, the circuit tables are again Toiulni^82T^ the channefnumbef. within 

queried to determine a new value of each of the "frame in "the interface! In this example, there are three active channels 

counter" and the "frame out counter." Examples of a pre- 50 within interface If 9: channel 31, channel 103, and channel 

determined amount of time are 30 seconds, or 50 seconds, 351. 

although highly correlated data may be obtained with even Column 83 ("OutFrames-tO") stores the "frame out 

less or significantly more time. The reason that two queries counter" value for each channel that resulted from the first 

are performed in some embodiments is that the counters of query, while column 84 ("InFrames-tO") stores the "frame in 

the circuit table typically count the data from the last time 55 counter" value for each channel that resulted from the first 

that the interface device was initialized. Thus, if the two query, Similarly, column 85 ("OutFrames-tl") stores the 

interface devices were initialized at different times, the "frame out counter" value for each channel that resulted 

difference between the values from the first query and the from the second query, while column 86 ("InFrames-tl") 

values from the second query will account for the different stores the "frame in counter" value for each channel that 

initialization times. 60 resulted from the second query. From these values, the value 

In step 64, each value from the first query (step 61) is for column 87 ("DeltaOut") may be determined by subtract- 

subtracted from a corresponding value from the second ing the value in column 83 from the value in column 85, for 

query (step 63), to determine the amount of data commu- each channel. Similarly, the value for column 88 ("Deltaln") 

nicated by each channel in the amount of time used as a can be determined by subtracting the value in column 84 

delay in step 62. The resulting values may be stored in traffic 65 from the value in column 86, for each channel. DeltaOut 

table 46A, an example of which is described in more detail represents the amount of octets transmitted by the associated 

below. channel during the time interval between the two queries, 
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while Deltaln represents the number of octets received by 
the associated channel during this same time interval. 

FIG. 9 is similar to FIG. 8, but represents an example of 
traffic data compiled for the channels 40 and 56 of interface 
If4. As in FIG. 8, column 91 identifies the interface, column 
92 identifies the particular channel for which data has been 
gathered, columns 93 and 94 store the counter values from 
the first query, and columns 95 and 96 store the counter 
values from the second query. The values for columns 97 
and 98 are then determined by subtraction from the earlier 
columns. 

FIG. 10 shows a specific example of a correlation matrix 
100 that contains two columns, one for each of the channels 
of interface If4 shown in FIG. 2. The correlation matrix 100 
further contains three rows, one for each of the channels of 
interface If 9 shown in FIG. 2. The correlation factors have 
been calculated from equation (1) using the data from FIGS. 
8 and 9. For example, the correlation factor for the potential 
channel pair: channel 40 of interface If4, and channel 31 of 
interface If9, has been determined as: 



10 



15 



20 



CF31-10 = 100- 



(abs(26,663 - 14,137) + abs(49,246 - 726)) * 100 
26,663 + 49,246+14,137 + 726 



= 32 



(2) 



25 



30 



In this example, the highest correlation factor is for the 
channel pair of channel 56 of interface If4 and channel 31 of 
interface If9, since 99 is the highest correlation factor value 
in the correlation table 100. Therefore, in this example, the 
virtual network machine 17 would be updated to represent 
that a specific frame relay connection exists between chan- 
nel 31 and channel 56. 

Generally, only a single conne ction will exist between an y 
twcPiuleifacet ) , su th e highcsT vaiue of th e correlation ta clor 

~is selected. _J1 two correlation l a ctors" are very ciose > 

"however^thi s ma y be a in dicative of"two spec iHc cnanneis. 

^uch'a siluation may be resolved by determining the amount 35 
of data throug hpu t supported jby each of the two susp ected 

" channels as compared with the amount of d ata actuaflypeing 
^transmitted across tnT^frame relav'network. 



"Although FIG. 4 shows a particular implementation of 

elements within the network interface and control subsystem 
40, those skilled in the art will realize that other implemen- 
tations are within the scope of the invention. For example, 
instead of tables or matrices, the appropriate data may be 
stored in any number of ways, and the functions of the data 
gatherer 42, the statistics module 43, and the results analyzer 
44 may be re-allocated to a different combination of mod- 
ules. 

The embodiments of the network management system 
described herein may also be implemented in specially - 
designed hardware such as a state machine or other digital 
circuitry, or in any of several programming languages on a 
general purpose computer, or as a programmed general 
purpose computer itself. 

For example, elements of the network management sys- 
tem shown in FIG. 4 may be implemented as software on a 
floppy disk, compact disk, or hard drive, which controls a 
computer, for example a general purpose computer such as 
a workstation, a mainframe or a personal computer, to 
perform steps of the disclosed processes or to implement 
equivalents to the disclosed block diagrams. Such a general 
purpose computer typically includes a central processing 
unit (CPU) coupled to random access memory (RAM) and 
program memory via a data bus. The general purpose 
computer may be connected to the monitored networks in 
order to interface with other elements, and may provide 
commands to devices on the network in order to control the 
network configuration. 



40 



45 



50 



65 



Alternatively, the elements of the embodiments described 
herein may be implemented as special purpose electronic 
hardware. Additionally, in either a hardware or software 
embodiment, the functions performed by these different 
elements may be combined in varying arrangements of 
hardware and software. For example, in at least one embodi- 
ment of the invention, the portions of the network interface 
and control shown in FIG. 4 are supplied as a separate 
software package known as a "Management Module/' 
which may be purchased and integrated with an existing 
instance of the Spectrum Network Management System. 

Having thus described at least one illustrative embodi- 
ment of the invention, various modifications and improve- 
ments will readily occur to those skilled in the art and are 
intended to be within the scope of the invention. 
Accordingly, the foregoing description is by way of example 
oniy and is not intended as limiting. 

What is claimed is: 

1. A method for identifying a frame relay connection in a 
frame relay network, the method comprising the steps of: 

identifying a first plurality of channels of a first interface 
and a second plurality of channels of a second interface 
that relate to a frame relay connection between the first 
and second interfaces; 

selecting, as an identifier of the frame relay connection, a 
first channel from the first plurality of channels and a 
second channel from the second plurality of channels 
based upon a relative amount of data transferred on 
each of the first and second channels; and 

identifying, based on said identifier, a frame relay con- 
nection in the frame relay network. 

2. The method of claim 1, including the step of determin- 
ing an amount of data transferred by each of the first 
plurality of channels and each of the second plurality of 
channels; and 

wherein the step of selecting includes determining the 
relative amount of data based upon the amount of data 
transferred by each of the first plurality of channels and 
each of the second plurality of channels. 

3. The method of claim 1, wherein the step of identifying 
the first plurality of channels and the second plurality of 
channels includes determining that a connection exists 
between an interface of a first interface device that is 
coupled to the frame relay network, and an interface of a 
second interface device that is coupled to the frame relay 
network; 

wherein the interface of the first interface device includes 
the first plurality of channels, and the interface of the 
second interface device includes the second plurality of 
channels. 

4. A method for identifying a frame relay connection in a 
network, the method comprising the steps of: 

identifying a first plurality of channels of a first interface 
and a second plurality of channels of a second interface 
that relate to a frame relay connection between the first 
and second interfaces; and 

selecting, as an identifier of the frame relay connection, a 
first channel from the first plurality of channels and a 
second channel from the second plurality of channels 
based upon a relative amount of data transferred on 
each of the first and second channels 

wherein the selecting step includes identifying a plurality 
of different potential pairs of channels, each potential 
pair including one of the first plurality of channels and 
one of the second plurality of channels; 

determining a plurality of correlation factors, each corre- 
lation factor relating to a respective one of the potential 
pairs of channels; and 
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determining which of the correlation factors has a best 
value with respect to others of the correlation factors, 
in order to determine which of the potential pairs of 
channels has a best correlation factor. 

5. The method of claim 4, wherein the step of determining 
the corrlation factor includes determining an amount of 
similarity between an amount of data transmitted by the one 
of the first plurality of channels and an amount of data 
received by the one of the second plurality of channels 
during a period of time. 

6. The method of claim 5, wherein the step of determining 
the correlation factor further includes determining the 
between an amount of data received by the one of the first 
plurality of channels and an amount of data transmitted by 
the one of the second plurality of channels during the period 
of time. 

7. A method for identifying a frame relay connection in a 
network, the method comprising the steps of: 

identifying a first plurality of channels of a first interface 
and a second plurality of channels of a second interface 
that relate to a frame relay connection between the first 
and second interfaces; 
determining an amount of data transferred by each of the 
first plurality of channels and each of the second 
plurality of channels; and 
selecting, as an identifier of the frame relay connection, a 
first channel from the first plurality of channels and a 
second channel from the second plurality of channels 
based upon a relative amount of data transferred on 
each of the first and second channels; 
wherein the step of selecting includes determining the 
relative amount of data based upon the amount of data 
transferred by each of the first plurality of channels and 
each of the second plurality of channels; 
wherein the step of determining, for one channel of the 
first plurality of channels that resides on a first interface 
device of the frame relay network, includes: 
querying the first interface device to determine a first 
amount of data that has been transferred on the one 
channel as of a first time; 
querying the first interface devices to determine a 
second amount of data that has been transferred on 
the one channel as of a second time; and 
determining a difference between the first and second 
amounts of data in order to determine the amount of 
data being transferred by the one channel. 

8. A method for identifying a frame relay connection in a 
frame relay network, the method comprising the steps of: 

identifying a first plurality of channels of a first interface 
and a second plurality of channels of a second interface 
that relate to a frame relay connection between the first 
and second interfaces; 

selecting, as an identifier of the frame relay connection, a 
first channel from the first plurality of channels and a 
second channel from the second plurality of channels 
based upon a relative amount of data transferred on 
each of the first and second channels; and 

identifying, based on said identifier, a frame relay con- 
nection in the frame relay network, 

wherein the step of identifying includes determining that 
a connection exists between an interface of a first 
interface device that is coupled to the frame relay 
network, and an interface of a second interface device 
that is coupled to the frame relay network; 

wherein the interface of the first interface device includes 
the first plurality of channels, and the interface of the 
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second interface device includes the second plurality of 
channels; and 

wherein said determining includes comparing an address 
of the first interface with a destination address of data 
5 transmitted by the second interface. 

9. An apparatus for identifying a frame relay connection 
in a frame relay network, the apparatus comprising: 

means for identifying a first plurality of channels of a first 
interface and a second plurality of channels of a second 
10 interface that relate to a potential frame relay connec- 
tion between the first and second interfaces; 

means for selecting a first channel from the first plurality 
of channels and a second channel from the second 
plurality of channels based upon a relative amount of 

15 A n *„ ~„ Cr,r~r,A „„ „„„U „f *l 1 1 

channels, to identify the frame relay connection; and 
means for identifying the frame relay connection in the 
frame relay network. 

10. The apparatus of claim 9, wherein the means for 
20 identifying first plurality of channels and a second plurality 

of channels includes means for determining that a connec- 
tion exists between an interface of a first interface device 
that is coupled to the frame relay network, and an interface 
of a second interface device that is coupled to the frame 
25 relay network; 

wherein the interface of the first interface device includes 
the first plurality of channels, and the interface of the 
second interface device includes the second plurality of 
30 channels. 

11. The apparatus of claim 10, wherein the means for 
determining includes means for comparing an address of the 
first interface with a destination address of data transmitted 
by the second interface. 

35 12. The apparatus of claim 9, including means for deter- 
mining an amount of data transferred by each of the first 
plurality of channels and each of the second plurality of 
channels; 

wherein the means for selecting includes means for deter- 
40 mining the relative amount of data based upon the 
amount of data transferred by each of the first plurality 
of channels and each of the second plurality of chan- 
nels. 

13. An apparatus for identifying a frame relay connection 
45 in a network, the apparatus comprising: 

means for identifying a first plurality of channels of a first 
interface and a second plurality of channels of a second 
interface that relate to a potential frame relay connec- 
tion between the first and second interfaces; and 
50 means for selecting a first channel from the first plurality 
of channels and a second channel from the second 
plurality of channels based upon a relative amount of 
data transferred on each of the first and second 
channels, to identify the frame relay connection; 
55 wherein the means for selecting includes: 

means for identifying a plurality of different potential 
pairs of channels, each potential pair including one 
of the first plurality of channels and one of the 
second plurality of channels; 
60 means for determining a plurality of correlation factors, 
each correlation factor relating to a respective one of 
the potential pairs of channels; and 
means for determining which of the correlation factors 
has a best value with respect to others of the corre- 
65 lation factors, in order to determine which of the 

potential pairs of channels has a best correlation 
factor. 
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14. The apparatus of claim 13, wherein the means for 
determining the correlation factor includes means for deter- 
mining an amount of similarity between an amount of data 
transmitted by the one of the first plurality of channels and 
an amount of data received by the one of the second plurality 5 
of channels during a period of time. 

15. The apparatus of claim 14, wherein the means for 
determining the correlation factor further includes means for 
determining the amount of similarity between an amount of 
data received by the one of the first plurality of channels and 10 
an amount of data transmitted by the one of the second 
plurality of channels during the period of time. 

16. An apparatus for identifying a frame relay connection 
in a network, the apparatus comprising: 

means for identifying a first plurality of channels of a first 15 
interface and a second plurality of channels of a second 
interface that relate to a potential frame relay connec- 
tion between the first and second interfaces; 

determining an amount of data transferred by each of the 
first plurality of channels and each of the second 20 
plurality of channels; and 

means for selecting a first channel from the first plurality 
of channels and a second channel from the second 
plurality of channels based upon a relative amount of 
data transferred on each of the first and second 25 
channels, to identify the frame relay connection; 

wherein the means for selecting includes means for deter- 
mining the relative amount of data based upon the 
amount of data transferred by each of the first plurality 3Q 
of channels and each of the second plurality of chan- 
nels; 

wherein the means for determining, for one channel of the 
first plurality of channels that resides on a first interface 
device of the frame relay network, includes: 35 
means for querying the first interface device to deter- 
mine a first amount of data that has been transferred 
on the one channel as of a first time; 
means for querying the first interface devices to deter- 
mine a second amount of data that has been trans- ^ 
ferred on the one channel as of a second time; and 
means for determining a difference between the first 
and second amounts of data in order to determine the 
amount of data being transferred by the one channel. 

17. An apparatus for identifying a frame relay connection 45 
in a frame relay network, the apparatus comprising: 

a data module, coupled to the network, having an output 
that provides an indication of a first plurality of chan- 
nels and a second plurality of channels that relate to a 
potential frame relay connection; 50 

a results analyzer, having an input coupled to the output 
of the data module, the results analyzer selecting a first 
channel from the first plurality of channels and a 
second channel from the second plurality of channels 
based upon a relative amount of data transferred by 55 
each of the first and second channels, to identify the 
frame relay connection; and 

means for identifying the frame relay connection in the 
frame relay network. 

18. The apparatus of claim 17, wherein the indication of eo 
the first plurality of channels and the second plurality of 
channels includes a plurality of different potential pairs of 
channels, each of the potential pairs including one of the first 
plurality of channels and one of the second plurality of 
channels. 65 

19. An apparatus for identifying a frame relay connection 
in a network, theapparatus comprising: 
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a data module, coupled to the network, having an output 
that provides an indication of a first plurality of chan- 
nels and a second plurality of channels that relate to a 
potential frame relay connection, wherein the indica- 
tion of the first plurality of channels and the second 
plurality of channels includes a plurality of different 
potential pairs of channels, each of the potential pairs 
including one of the first plurality of channels and one 
of the second plurality of channels; 

a results analyzer, having an input coupled to the output 
of the data module, the results analyzer selecting a first 
channel from the first plurality of channels and a 
second channel from the second plurality of channels 
based upon a relative amount of data transferred by 
each of the first and second channels, to identify the 
frame relay connection; and 

a statistics module, coupled between the output of the data 
module and the input of the results analyzer, the sta- 
tistics module determining a plurality of correlation 
factors, each correlation factor relating to a respective 
one of the potential pairs of channels. 

20. The apparatus of claim 19, wherein the results ana- 
lyzer determines which of the plurality of correlation factors 
has a best value with respect to others of the plurality of 
correlation factors, to determine which of the plurality of 
potential pairs of channels has a best correlation factor. 

21. The apparatus of claim 19, wherein the statistics 
module determines a correlation factor between one of the 
first plurality of channels and one of the second plurality of 
channels, the correlation factor being proportional to an 
amount of similarity between an amount of data transmitted 
by the one of the first plurality of channels and an amount 
of data received by the one of the second plurality of 
channels during a period of time, 

22. The apparatus of claim 21, wherein the correlation 
factor is further proportional to the amount of similarity 
between an amount of data received by the one of the first 
plurality of channels and the amount of data transmitted by 
the one of the second plurality of channels during the period 
of time. 

23. An apparatus for identifying a frame relay connection 
in a network, the apparatus comprising: 

a data module, coupled to the network, having an output 
that provides an indication of a first plurality of chan- 
nels and a second plurality of channels that relate to a 
potential frame relay connection, wherein the data 
module determines an amount of data transferred by 
each of the first plurality of channels and each of the 
second plurality of channels; 

a results analyzer, having an input coupled to the output 
of the data module, the results analyzer selecting a first 
channel from the first plurality of channels and a 
second channel from the second plurality of channels 
based upon a relative amount of data transferred by 
each of the first and second channels, to identify the 
frame relay connection; and 

a statistics module, coupled between the data module and 
the results analyzer, the statistics module determining 
the relative amount of data based upon the amount of 
data transferred by each of the first plurality of channels 
and each of the second plurality of channels. 

24. The apparatus of claim 23, wherein the data module 
determines the amount of data being transferred by one 
channel of the first plurality of channels based upon a 
difference between an amount of data that has been trans- 
ferred by the one channel as of a first time, and an amount 
of data that has been transferred by the one channel as of a 
second time. 
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25. A network management system for monitoring a 
frame relay network including: 

a data module, coupled to the network, constructed and 
arranged to provide a plurality of different potential 
pairs of channels that relate to a potential frame relay 
connection, wherein each of the potential pairs includes 
one of a first plurality of channels and one of a second 
plurality of channels; 

a results analyzer including an input coupled to an output io 
of the data module, the results analyzer being con- 
structed and arranged to select from the plurality of 
different potential pairs a first channel, from the first 
plurality of channels, and a second channel, from the 
second plurality of channels, based upon a relative 15 
amount of data transferred by each of the first and 
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second channels, to identify the frame relay connec- 
tion; and 

a user interface constructed and arranged to receive from 
said results analyzer the identified frame relay connec- 
tion in the frame relay network and constructed and 
arranged to enable a user to monitor the identified 
frame relay connection, 
26. The network management system of claim 25 com- 
prising a statistics module coupled between the data module 
and the results analyzer, the statistics module being con- 
structed and arranged to determine the relative amount of 
data based upon the amount of data transferred by each of 
the first plurality of channels and each of the second plurality 
of channels. 

* * * * * 
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